Skip to content

Use OpenSSL's default CA file on MRI - #484

Open
yyuu wants to merge 4 commits into
nahi:masterfrom
yyuu:use-openssl-trust-store-by-default
Open

yyuu wants to merge 4 commits into
nahi:masterfrom
yyuu:use-openssl-trust-store-by-default

Conversation

@yyuu

@yyuu yyuu commented Oct 30, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Use OpenSSL::X509::DEFAULT_CERT_FILE as the default CA file on MRI; JRuby continues to use JVM defaults.
  • Add SSLConfig#cacert_file= to select another CA file, replacing the current store and resetting sessions.
  • Expose SSLConfig::BUNDLED_CACERT_FILE for callers who want the previous bundled CA behavior, and document CA selection.

Related to #480.

@yyuu
yyuu marked this pull request as ready for review October 30, 2026 07:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant